Assurance and transparency

What you can verify yourself, and where our limits are.

SHA-256

File fingerprint

A code is generated from the file at the time of recording. If the file changes even slightly, the code changes completely, so you can see whether your copy matches the recorded one.

AES-256-GCM

Encrypted vault

Each file is encrypted with its own key, and its integrity is checked every time it is read.

Hash chain

Tamper-evident log

Every event is linked to the one before it. The database rejects any change or deletion of log entries.

Ed25519

Signature

Every event is signed with HUVRA's key. With the public key, you can verify it without trusting anyone.

Public key

Key ID b4178b021eedca67. Evidence packages include this key and a verification script.

Download the public key

Limits

  • A record, not a truth testWe show when and by whom a record was made; we do not investigate whether a work is a copy.
  • Overlap checks are limitedThey look only at HUVRA records and do not crawl the internet.
  • No absolute verdictsWe say “this evidence was reviewed by this method.” We do not give absolute verdicts, scores or percentages.
  • Legal weightA record is technical evidence; its weight is for a court to decide.

Appeals, suspension and revocation

Anyone who objects must verify their identity and give a specific reason. An anonymous report alone does not start a process.

Process steps and time limits
StepTimeNote
Acknowledgement5 working days
Admissibility10 working daysIdentity, specific grounds and proof are required
Review30 days (+15 days, once)Independent panel that took no part in the decision
Applicant right of reply15 daysRight to be heard
Reasoned decision10 working daysWritten notice
Second appealWithin 30 daysIndependent appeal panel

The time limits are targets under Standard v0.2 and may vary with current capacity.

When does suspension or revocation happen?

In case of serious doubt, a certificate is suspended for up to 60 days. Grounds for revocation: forged evidence, publishing a mismatched version under the same certificate, misuse of the logo, failure to resolve the conditions of a suspension, or the applicant's own request. For a serious violation, a 24-month ban on reapplying applies.

Governance goal

The standard is to be owned by a non-profit body. Its decision-making body will have three chambers, representing creators, users and industry, and academia and civil society; no single chamber can hold a majority alone. Certification is kept separate from writing the standard. Evaluators file a written conflict-of-interest declaration once a year, and volunteer auditors file one for every engagement. Donations and sponsorships are listed publicly; sponsors cannot take part in decisions.